Jann Horn discovered that CUPS permitted HTTP requests with the Host header set to "localhost.localdomain" from the loopback interface. If a user were tricked in to opening a specially crafted website in their web browser, an attacker could potentially exploit this to obtain sensitive information or control printers, via a DNS rebinding attack. (CVE-2017-18190)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "cups", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-bsd", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-bsd-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-client", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-client-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-common", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-core-drivers", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-core-drivers-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-daemon", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-daemon-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-dbg", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-ppdc", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-ppdc-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "cups-server-common", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcups2", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcups2-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcups2-dev", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcups2-dev-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupscgi1", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupscgi1-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupscgi1-dev", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupscgi1-dev-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsimage2", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsimage2-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsimage2-dev", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsimage2-dev-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsmime1", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsmime1-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsmime1-dev", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsmime1-dev-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsppdc1", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsppdc1-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsppdc1-dev", "binary_version": "1.7.2-0ubuntu1.9" }, { "binary_name": "libcupsppdc1-dev-dbgsym", "binary_version": "1.7.2-0ubuntu1.9" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "cups", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-bsd", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-bsd-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-client", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-client-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-common", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-core-drivers", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-core-drivers-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-daemon", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-daemon-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-dbg", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-ipp-utils", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-ipp-utils-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-ppdc", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-ppdc-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "cups-server-common", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcups2", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcups2-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcups2-dev", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcups2-dev-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupscgi1", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupscgi1-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupscgi1-dev", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupscgi1-dev-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsimage2", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsimage2-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsimage2-dev", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsimage2-dev-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsmime1", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsmime1-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsmime1-dev", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsmime1-dev-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsppdc1", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsppdc1-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsppdc1-dev", "binary_version": "2.1.3-4ubuntu0.4" }, { "binary_name": "libcupsppdc1-dev-dbgsym", "binary_version": "2.1.3-4ubuntu0.4" } ] }